Critical
CVE-2024-1071
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2024-1776
Admin side data storage for Contact Form 7 <= 1.1.1 - Authenticated (Admin+) SQL Injection
Critical
CVE-2024-0365
Fancy Product Designer <= 6.1.4 - Authenticated (Admin+) SQL Injection
High
CVE-2024-25933
PeproDev Ultimate Invoice <= 1.9.7 - Unauthenticated Sensitive Information Exposure via init_plugin
Medium
CVE-2023-6821
Error Log Viewer <= 1.1.2 - Sensitive Information Exposure
Critical
CVE-2024-1068
404 Solution <= 2.35.7 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-6444
Seriously Simple Podcasting <= 2.25.3 - Unauthenticated Email Disclosure
Critical
CVE-2024-0610
Piraeus Bank WooCommerce Payment Gateway <= 1.6.5.1 - Unauthenticated SQL Injection
Critical
CVE-2024-1512
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.2.5 - Unauthenticated SQL Injection
Medium
CVE-2024-1279
Paid Memberships Pro <= 2.12.8 - Authenticated (Contributor+) Information Disclosure via Shortcode
Critical
CVE-2024-25928
Sitepact's Contact Form 7 Extension For Klaviyo <= 1.0.5 - Unauthenticated SQL Injection
Critical
CVE-2024-25927
postMash – custom post order <= 1.2.0 - Unauthenticated SQL Injection
Medium
CVE-2024-25923
Community by PeepSo <= 6.2.7.0 - Unauthenticated Sensitive Information Disclosure via Log file
High
CVE-2024-25095
Easy Forms for Mailchimp <= 6.8.10 - Sensitive Information Exposure via logfile
Medium
CVE-2024-1294
Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice
Critical
CVE-2024-25910
MoveTo <= 6.2 - Unauthenticated SQL Injection
Medium
CVE-2024-25902
Malware Scanner <= 4.7.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-25591
WP Editor <= 1.2.7 - Sensitive Information Exposure via log file
High
CVE-2024-1317
RSS Aggregator by Feedzy <= 4.4.2 - Authenticated(Contributor+) SQL Injection
High
CVE-2024-0594
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection
Medium
f6c5e3f8-ebbd-4cc3-b9b1-3f1704e3c07a
Paid Memberships Pro <= 2.12.8 - Authenticated (Contributor+) User Meta Disclosure
Medium
CVE-2023-6565
InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-1319
Events Tickets Plus <= 5.9.0 - Missing Authorization to Information Exposure
High
CVE-2024-1206
WP Recipe Maker <= 9.1.2 - Missing Authorization to Authenticated (Subscriber+) SQL Injecton
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.